PDPA Data Breach Assessment & PDPC Notification Pack

For Singapore organisations and DPOs: describe a data incident and get a PDPA Part 6A notifiability assessment, a draft PDPC notification, a plain-English notice to affected individuals and a containment and evidence checklist.

Use cases

• An online retailer discovers a misconfigured cloud bucket and must decide within days whether to notify the PDPC
• A clinic's DPO needs a notice to patients after a staff email went to the wrong recipients
• A SaaS company acting as data intermediary must alert its client organisations about a vendor-side incident